Skip to content
OpenAdvisories

Vendor

idinging

1 known vulnerabilities.

Products

FreeMail 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.6
    CVE-2026-119049

    FreeMail before 5.3.2 Authorization Bypass via /api/create Mailbox Claiming

    FreeMail before 5.3.2 contains an authorization bypass vulnerability that allows authenticated users to claim another user's existing mailbox via the POST /api/create endpoint. Attackers who know a victim's address can become co-owners through assignMailboxTo…

    idinging FreeMail